Privacy Policy.

This Privacy Policy explains how Scottship Solutions LLC ("preventionOS", "we", "us") collects, uses, and protects information in connection with the preventionOS website and platform (the "Service"). This is an interim policy and will be updated as our terms are finalized. For personal information that a customer organization ("Customer") submits about its training participants and contacts, the Customer is the controller and preventionOS acts as a processor under the Data Processing Agreement.

Account and contact information you provide when you request a demo, contact us, or administer an account, such as name, work email, organization, and role. Participant and program data that Customers enter into the platform, such as registration details, dictionary-backed demographics, assessment responses, and certificates, which we process on the Customer's behalf. Usage and device data collected automatically, such as pages viewed, approximate location derived from IP address, and browser type. Cookies and similar technologies as described below.

To provide, operate, secure, and improve the Service. To respond to demo requests and support inquiries. To send service and administrative messages. To produce aggregate, de-identified analytics. To comply with legal obligations. We do not sell personal information.

For information we collect directly about our own website visitors and Customer administrators, preventionOS is the controller. For personal information a Customer submits about its participants and contacts, the Customer is the controller and preventionOS is the processor, acting on the Customer's documented instructions under the Data Processing Agreement.

We share information with vetted service providers who help us run the Service, including cloud hosting, content delivery, and email delivery providers, under contracts that require appropriate safeguards. We may disclose information where required by law or to protect rights and safety. We do not sell personal information or share it for cross-context behavioral advertising. A current list of sub-processors is available on request.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit, tenant isolation, role-based access controls, and routine backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes. Customer data is retained according to the Customer's subscription and is returned or deleted after termination as described in the Customer agreement.

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, or to data portability. For data a Customer controls, please direct your request to that Customer, and we will support the Customer in responding. For information we control, contact us using the details below.

Prevention programs may involve minors. Where a Customer's program includes participants who are minors, the Customer is responsible for obtaining any required parental or guardian consent and for following applicable law. The Service is not directed to children for the creation of their own accounts.

preventionOS is operated in the United States. If you access the Service from outside the United States, you understand that your information is processed in the United States.

We use necessary cookies to operate the site and limited analytics to understand usage. You can control cookies through your browser settings. Disabling some cookies may affect site functionality.

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated effective date, and where appropriate we will provide additional notice.

Questions about this Privacy Policy or our data practices can be sent to privacy@preventionos.org.